Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.mft
File:                     B29C9E9E159927EF57070D5FA385A6925A500FA5.mft (raw, json)
Hash identifier:          xzJ3AFL9BJV04nc5eP5C5LVlE6FS7ZPEzdIglGCVR0s=
Subject key identifier:   AA:2B:0F:32:51:9E:7B:DF:36:4F:83:36:C0:87:A3:9C:E0:F1:81:72
Authority key identifier: B2:9C:9E:9E:15:99:27:EF:57:07:0D:5F:A3:85:A6:92:5A:50:0F:A5
Certificate issuer:       /CN=B29C9E9E159927EF57070D5FA385A6925A500FA5
Certificate serial:       102635C67603CE9AEB5CC52CD3100B64D8ED0A4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.mft
Manifest number:          A7
Signing time:             Fri 31 Jan 2025 14:07:08 +0000
Manifest this update:     Fri 31 Jan 2025 14:02:08 +0000
Manifest next update:     Wed 05 Feb 2025 02:45:08 +0000
Files and hashes:         1: B29C9E9E159927EF57070D5FA385A6925A500FA5.crl (hash: 0gxbydeg9KpV1RxckNWdpxeuBm7A0dLMwTVjwgXDQDo=)
                          2: 3137392e36332e33362e302f32322d3234203d3e20323732313334.roa (hash: rrkqHxlWEhJBt478hF/A1svUVrpAg3hgYHLXv9MdM/Q=)
                          3: 323830333a633039303a3a2f33322d3438203d3e20323732313334.roa (hash: XjEmjYwnmvCgC6pEpN4PC7IRABytSe22CD2k2JViACE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:26:35:c6:76:03:ce:9a:eb:5c:c5:2c:d3:10:0b:64:d8:ed:0a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29C9E9E159927EF57070D5FA385A6925A500FA5
        Validity
            Not Before: Jan 31 14:02:08 2025 GMT
            Not After : Feb  5 02:45:08 2025 GMT
        Subject: CN=AA2B0F32519E7BDF364F8336C087A39CE0F18172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:41:76:4e:ab:1e:70:b4:5e:a0:ee:57:32:
                    d8:f8:75:90:d1:a4:7f:fc:65:19:82:24:3e:e2:65:
                    e2:d4:eb:43:22:13:14:62:29:d8:95:d8:11:91:57:
                    6f:43:a8:fb:06:9d:9f:d8:72:d4:e4:05:1f:b5:db:
                    20:59:49:fd:70:78:8a:45:86:96:cd:61:21:16:8e:
                    7f:f5:b6:b5:d5:b0:b9:90:e0:e7:17:a5:ee:e7:d8:
                    33:56:2e:cb:a1:8b:1e:79:45:b5:56:12:b2:4f:ff:
                    0f:32:71:8f:6e:f6:07:72:b4:64:56:32:6d:23:1a:
                    ce:5c:9f:f0:78:4f:77:67:72:0a:e9:4d:8f:7f:f1:
                    87:19:ea:b1:c1:ba:f0:13:29:3d:46:69:b4:01:df:
                    c6:68:8d:b2:96:36:2e:41:cc:d7:3f:2d:87:1d:70:
                    3d:d3:af:e9:de:c0:ea:c5:1d:0e:85:b4:c4:af:29:
                    5e:df:06:cd:dc:d9:09:6c:df:56:45:73:c4:5f:a1:
                    b7:e6:97:63:d4:17:8d:f9:fa:a1:ae:de:9a:0e:9d:
                    a3:6f:f9:78:56:e1:be:ac:b7:eb:97:99:2e:ec:57:
                    a4:09:50:5d:72:66:67:f9:71:6e:e3:1b:aa:4b:d3:
                    9c:18:95:02:26:1e:66:35:18:b9:3e:b9:a7:40:3d:
                    03:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2B:0F:32:51:9E:7B:DF:36:4F:83:36:C0:87:A3:9C:E0:F1:81:72
            X509v3 Authority Key Identifier:
                keyid:B2:9C:9E:9E:15:99:27:EF:57:07:0D:5F:A3:85:A6:92:5A:50:0F:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:9d:fb:fe:ee:ea:c2:7b:a5:3c:1a:61:42:c9:17:b6:de:34:
         14:9c:24:f6:46:ca:5c:ab:7a:c7:18:90:ae:c7:51:5b:43:3f:
         20:6c:ac:68:d4:c7:c7:25:ef:48:ec:de:60:92:bc:76:be:dc:
         e0:65:0a:70:17:a3:d8:70:b6:17:c5:d2:9a:31:c1:ee:6f:70:
         a3:63:dc:e9:5d:70:55:2c:1d:be:b5:dc:b3:1b:db:58:af:fa:
         70:55:8a:d4:97:8e:36:24:ca:c7:95:48:c0:13:6a:d6:3e:a7:
         d1:c0:66:65:5d:eb:1b:33:bf:59:5b:b5:6b:7d:da:68:55:dc:
         bc:40:59:71:07:29:13:72:df:63:0b:52:6d:94:b1:32:90:2a:
         11:de:41:96:0f:4f:33:6c:9c:a1:6d:77:3d:9e:34:4f:95:20:
         f0:52:01:f7:0b:3a:eb:df:df:1b:02:49:46:25:5e:b0:a4:9f:
         2d:41:d6:d7:60:fa:47:3d:74:41:42:00:7c:e8:92:1d:82:65:
         6a:dc:01:66:4e:a4:ca:6f:fa:02:89:68:5f:dc:ba:d7:a0:02:
         c9:3b:ca:58:29:3e:19:49:cb:43:6d:41:2c:e5:b1:d4:32:2c:
         8f:43:94:1c:24:45:f8:3a:4a:41:74:ca:2c:5d:1c:86:fa:b8:
         5e:a7:04:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----